@hasna/skills 0.10.30 → 0.10.31

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.30",
+    version: "0.10.31",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -51369,6 +51369,29 @@ function mcpControls(path, read2) {
       refuse2();
   return sha2562;
 }
+function isBundledCleanupHooks(root, namespace, value) {
+  const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  const exactKeys = (v, keys2) => Object.keys(v).length === keys2.length && keys2.every((key) => Object.hasOwn(v, key));
+  if (basename5(dirname10(root)) !== namespace || basename5(dirname10(dirname10(root))) !== "openai-bundled")
+    return false;
+  const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
+  if (!server || !object5(value) || !exactKeys(value, ["hooks"]) || !object5(value.hooks))
+    return false;
+  const events = Object.entries(value.hooks);
+  if (!events.length || events.length > 3)
+    return false;
+  for (const [event, groups] of events) {
+    if (!["Interrupt", "SubagentStop", "Stop"].includes(event) || !Array.isArray(groups) || groups.length !== 1)
+      return false;
+    const group = groups[0];
+    if (!object5(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
+      return false;
+    const handler = group.hooks[0];
+    if (!object5(handler) || !exactKeys(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object5(handler.input) || !exactKeys(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
+      return false;
+  }
+  return true;
+}
 function rootControls(root, read2) {
   const manifestPath = join18(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync12(manifestPath, { throwIfNoEntry: false });
   if (!lstatSync12(join18(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
@@ -51386,9 +51409,11 @@ function rootControls(root, read2) {
   const cacheVersion = basename5(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
     refuse2();
-  if (manifest.hooks !== undefined || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync12(join18(root, "hooks"), { throwIfNoEntry: false }))
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync12(join18(root, "hooks"), { throwIfNoEntry: false }))
     refuse2();
   const mcp = join18(root, ".mcp.json"), mcpPresent = lstatSync12(mcp, { throwIfNoEntry: false });
+  if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
+    refuse2();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync5(mcp) !== mcp))
     refuse2();
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.30",
+    version: "0.10.31",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.30",
+  version: "0.10.31",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.30",
+  version: "0.10.31",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.30",
+  version: "0.10.31",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -10917,7 +10917,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.30",
+  version: "0.10.31",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -13509,6 +13509,29 @@ function mcpControls(path, read2) {
       refuse2();
   return sha2562;
 }
+function isBundledCleanupHooks(root, namespace, value) {
+  const object5 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  const exactKeys = (v, keys) => Object.keys(v).length === keys.length && keys.every((key) => Object.hasOwn(v, key));
+  if (basename5(dirname10(root)) !== namespace || basename5(dirname10(dirname10(root))) !== "openai-bundled")
+    return false;
+  const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
+  if (!server || !object5(value) || !exactKeys(value, ["hooks"]) || !object5(value.hooks))
+    return false;
+  const events = Object.entries(value.hooks);
+  if (!events.length || events.length > 3)
+    return false;
+  for (const [event, groups] of events) {
+    if (!["Interrupt", "SubagentStop", "Stop"].includes(event) || !Array.isArray(groups) || groups.length !== 1)
+      return false;
+    const group = groups[0];
+    if (!object5(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
+      return false;
+    const handler = group.hooks[0];
+    if (!object5(handler) || !exactKeys(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object5(handler.input) || !exactKeys(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
+      return false;
+  }
+  return true;
+}
 function rootControls(root, read2) {
   const manifestPath = join14(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync12(manifestPath, { throwIfNoEntry: false });
   if (!lstatSync12(join14(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
@@ -13526,9 +13549,11 @@ function rootControls(root, read2) {
   const cacheVersion = basename5(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
     refuse2();
-  if (manifest.hooks !== undefined || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync12(join14(root, "hooks"), { throwIfNoEntry: false }))
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync12(join14(root, "hooks"), { throwIfNoEntry: false }))
     refuse2();
   const mcp = join14(root, ".mcp.json"), mcpPresent = lstatSync12(mcp, { throwIfNoEntry: false });
+  if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
+    refuse2();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync5(mcp) !== mcp))
     refuse2();
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.30",
+  version: "0.10.31",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -38451,6 +38451,29 @@ function mcpControls(path, read) {
       refuse3();
   return sha2562;
 }
+function isBundledCleanupHooks(root, namespace, value) {
+  const object3 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  const exactKeys2 = (v, keys2) => Object.keys(v).length === keys2.length && keys2.every((key) => Object.hasOwn(v, key));
+  if (basename3(dirname5(root)) !== namespace || basename3(dirname5(dirname5(root))) !== "openai-bundled")
+    return false;
+  const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
+  if (!server || !object3(value) || !exactKeys2(value, ["hooks"]) || !object3(value.hooks))
+    return false;
+  const events = Object.entries(value.hooks);
+  if (!events.length || events.length > 3)
+    return false;
+  for (const [event, groups] of events) {
+    if (!["Interrupt", "SubagentStop", "Stop"].includes(event) || !Array.isArray(groups) || groups.length !== 1)
+      return false;
+    const group = groups[0];
+    if (!object3(group) || !exactKeys2(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
+      return false;
+    const handler = group.hooks[0];
+    if (!object3(handler) || !exactKeys2(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object3(handler.input) || !exactKeys2(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
+      return false;
+  }
+  return true;
+}
 function rootControls(root, read) {
   const manifestPath = join10(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync6(manifestPath, { throwIfNoEntry: false });
   if (!lstatSync6(join10(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
@@ -38468,9 +38491,11 @@ function rootControls(root, read) {
   const cacheVersion = basename3(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
   if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
     refuse3();
-  if (manifest.hooks !== undefined || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync6(join10(root, "hooks"), { throwIfNoEntry: false }))
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync6(join10(root, "hooks"), { throwIfNoEntry: false }))
     refuse3();
   const mcp = join10(root, ".mcp.json"), mcpPresent = lstatSync6(mcp, { throwIfNoEntry: false });
+  if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
+    refuse3();
   if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync5(mcp) !== mcp))
     refuse3();
   if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))

package/docs/plugin-admission.md

@@ -364,3 +364,24 @@ their exact witnesses and trust state; they must still pass their own consumer
 checks before use. The plan's `managedAgentChecks.agents` and `nativeSkills`
 describe this scoped runtime check, not a fleet health result. A path-identity
 witness intersecting the write still refuses instead of adopting a new inode.
+
+## Codex bundled cleanup controls
+
+Qualified native skill review supports a narrow subset of Codex 0.159.2 and
+0.160.0's bundled cleanup hooks. The identities `browser`, `chrome`, `chrome-dev`,
+`chrome-internal` and `computer-use` in `openai-bundled` may call
+`node_repl.turn_ended`; `unified-computer-use` may call `cua_repl.turn_ended`.
+Only `Interrupt`, `SubagentStop` and `Stop` are accepted, with one group and one
+MCP handler per event. Inputs are the exact native event, turn and session
+placeholders; `SubagentStop` uses the child `agent_id` for its session value.
+Commands, matchers, other arguments, external hook files and a plugin MCP
+declaration alongside these hooks remain refused. Apps cleanup routing requires
+connector identity from a native tool catalog and is not admitted by this path.
+
+The complete inline hooks stay in the manifest fingerprint across cache versions,
+including after all native skill bodies disappear. A changed hook fails guarded
+apply and subsequent discovery checks. This review preserves native cleanup;
+it neither enables plugins nor grants hook trust, browser authority or signing.
+The upstream contracts are
+[0.159.2 bundled hooks](https://github.com/openai/codex/blob/ff6aec96948b70d94983af2641a6b67c94faeff5/codex-rs/plugin/src/bundled_hooks.rs)
+and [0.160.0 bundled hooks](https://github.com/openai/codex/blob/a956835d020762cb2b570053af06f643a11c0ecc/codex-rs/plugin/src/bundled_hooks.rs).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.30",
+  "version": "0.10.31",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {